4 matches found
@axel92/nodejs-course (1.2.0), @brocan/bond (>=2.0.0, <=3.0.2) +17 more potentially affected by CVE-2018-3711 via fastify (>=0.5.0, <=0.37.0)
fastify NPM version =0.5.0, =2.0.0, =1.5.0, =0.0.1, =0.3.0, =0.1.0, =0.0.4, =0.0.1, =0.0.1, =0.12.0, =0.1.0, =0.1.1 - schnack 0.0.1-alpha and more Source cves: CVE-2018-3711 Source advisory: OSV:GHSA-MQ6C-FH97-4GWV...
CVE-2018-3711
Fastify node module before 0.38.0 is vulnerable to a denial-of-service attack by sending a request with "Content-Type: application/json" and a very large payload...
CVE-2018-3711
Fastify node module before 0.38.0 is vulnerable to a denial-of-service attack by sending a request with "Content-Type: application/json" and a very large payload...
CVE-2018-3711
CVE-2018-3711 affects the Fastify node module prior to 0.38.0. A vulnerability allows a denial-of-service by sending a request with Content-Type: application/json and a very large payload, potentially making the service unresponsive. The issue is triggered by processing large JSON payloads; no ex...